phishing

Bank of America impersonators weaponize ScreenConnect, then make it hard to remove

Don't miss, Hot stuff, Huntress, macOS, News, phishing, remote access, Windows /

Bank of America impersonators weaponize ScreenConnect, then make it hard to remove 2026-08-05 at 11:43 By Zeljka Zorz A phishing campaign impersonating Bank of America (BoA) is underway, trying to trick Windows users into installing ScreenConnect remote access software and then making it difficult to uninstall it. Different traps for Mac and Windows users By […]

Bank of America impersonators weaponize ScreenConnect, then make it hard to remove Read More »

Russian hackers abuse hotel Wi-Fi networks to steal Microsoft 365 credentials and deploy malware

cyber espionage, Microsoft, Microsoft 365, News, phishing, Russian Federation /

Russian hackers abuse hotel Wi-Fi networks to steal Microsoft 365 credentials and deploy malware 2026-08-04 at 13:45 By Sinisa Markovic Midnight Blizzard, the Russian threat actor tied to the country’s foreign intelligence service, has spent months targeting users of public Wi-Fi networks at places like hotels and conference centers, according to new findings from Microsoft […]

Russian hackers abuse hotel Wi-Fi networks to steal Microsoft 365 credentials and deploy malware Read More »

Russian State APT Linked to Recent Public Wi-Fi Gateway Hacking

APT, Microsoft, Midnight Blizzard, Mobile & Wireless, phishing, Russia, Wi-Fi /

Russian State APT Linked to Recent Public Wi-Fi Gateway Hacking 2026-08-03 at 12:17 By Ionut Arghire Midnight Blizzard has been stealing Microsoft account credentials via compromised Wi-Fi networks at hospitality organizations. The post Russian State APT Linked to Recent Public Wi-Fi Gateway Hacking appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View […]

Russian State APT Linked to Recent Public Wi-Fi Gateway Hacking Read More »

Attackers are using Microsoft’s legitimate login system to camouflage phishing attacks

cybercrime, Email, Microsoft 365, News, phishing /

Attackers are using Microsoft’s legitimate login system to camouflage phishing attacks 2026-07-30 at 14:22 By Sinisa Markovic Attackers are moving away from fake Microsoft login pages in favor of abusing Microsoft’s own authentication system, letting phishing campaigns slip past the warning signs employees are trained to spot, according to Check Point. Between June 25 and […]

Attackers are using Microsoft’s legitimate login system to camouflage phishing attacks Read More »

Call of Duty Mobile scam uses fake free points giveaway to hijack players’ accounts

cybercrime, Malwarebytes, News, online gaming, phishing, scams /

Call of Duty Mobile scam uses fake free points giveaway to hijack players’ accounts 2026-07-28 at 07:30 By Sinisa Markovic Call of Duty Mobile players should watch out for a phishing campaign disguised as a free Call of Duty Points giveaway, Malwarebytes researchers have warned. Victims are asked to log in with their email address […]

Call of Duty Mobile scam uses fake free points giveaway to hijack players’ accounts Read More »

ChatGPT joins the most impersonated brands in phishing attacks

AI, ChatGPT, Check Point, cybersecurity, financial industry, News, phishing, report, social networking /

ChatGPT joins the most impersonated brands in phishing attacks 2026-07-27 at 14:08 By Anamarija Pogorelec Microsoft continued to be the most impersonated brand in Q2 2026, accounting for 23% of all brand phishing attempts. LinkedIn, Google, Apple, and Amazon followed, with the five brands together making up more than half of all brand phishing attempts […]

ChatGPT joins the most impersonated brands in phishing attacks Read More »

Russian hackers exploit unpatched Zimbra servers to steal emails

CISA, CVE, cyber espionage, Government, News, phishing, Russian Federation /

Russian hackers exploit unpatched Zimbra servers to steal emails 2026-07-24 at 15:09 By Sinisa Markovic Russian state-backed hacker group Laundry Bear has been breaking into government and commercial networks for at least a year by exploiting a vulnerability in the Zimbra Collaboration Suite (ZCS) webmail platform. Laundry Bear (also known as Void Blizzard, CL-STA-1114, and […]

Russian hackers exploit unpatched Zimbra servers to steal emails Read More »

Police dismantle Kratos phishing platform behind 15,000 monthly campaigns

cybercrime, EU, law enforcement, News, phishing /

Police dismantle Kratos phishing platform behind 15,000 monthly campaigns 2026-07-22 at 11:02 By Sinisa Markovic German and US law enforcement have dismantled the infrastructure behind Kratos, a notorious phishing-as-a-service (PhaaS) platform. Its alleged developer and administrator was arrested in Indonesia by local police. Seizure banner (Source: BKA) The takedown was led by the Frankfurt public […]

Police dismantle Kratos phishing platform behind 15,000 monthly campaigns Read More »

The script, not the voice, is what makes AI voice phishing work

cybercrime, Don't miss, identity verification, News, phishing, research, scams, threats, vishing /

The script, not the voice, is what makes AI voice phishing work 2026-07-17 at 10:31 By Sinisa Markovic The call comes in at 4:40 on a Friday. The voice belongs to a senior manager, or sounds close enough, and she needs a password reset before a flight. She is polite, she is in a hurry, […]

The script, not the voice, is what makes AI voice phishing work Read More »

Finance phishing works because it sounds boringly normal

Cofense, cybersecurity, financial industry, News, phishing, report /

Finance phishing works because it sounds boringly normal 2026-07-16 at 06:53 By Anamarija Pogorelec Finance departments process a constant stream of invoices, contracts, payment notices, and procurement emails, making email one of the most common initial access vectors for threat actors. According to Cofense, attackers exploit those workflows with phishing emails that resemble legitimate business […]

Finance phishing works because it sounds boringly normal Read More »

Okta Warns of Vishing Attacks Targeting Microsoft 365 Customers

Microsft 365, Okta, phishing, vishing /

Okta Warns of Vishing Attacks Targeting Microsoft 365 Customers 2026-07-10 at 14:06 By Ionut Arghire The attackers call victims to direct them to phishing websites mirroring Microsoft Entra ID login pages. The post Okta Warns of Vishing Attacks Targeting Microsoft 365 Customers appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original […]

Okta Warns of Vishing Attacks Targeting Microsoft 365 Customers Read More »

Thousands of malicious AI skills found capable of stealing data, running malware

agentic AI, AI, cybersecurity, ESET, News, phishing, QR codes, Ransomware, report, threat /

Thousands of malicious AI skills found capable of stealing data, running malware 2026-07-08 at 12:00 By Anamarija Pogorelec AI agents can browse the web, use external tools, execute commands, and perform tasks on behalf of users. Many rely on skills that define how they interact with services and data. Malicious skills can abuse those capabilities […]

Thousands of malicious AI skills found capable of stealing data, running malware Read More »

The ARToken phishing panel targets Microsoft 365 accounts

Cisco, cybercrime, Don't miss, Microsoft 365, News, phishing, threats /

The ARToken phishing panel targets Microsoft 365 accounts 2026-07-01 at 13:00 By Sinisa Markovic Accounts-payable staff at U.S. companies keep receiving invoice emails that look like they come from vendors they already work with. One landed at a life-sciences company in April 2026, addressed to the person who handles payments and written in the voice […]

The ARToken phishing panel targets Microsoft 365 accounts Read More »

$3 Million Reportedly Stolen in Polymarket Hack

Cryptocurrency, cryptocurrency heist, cybercrime, phishing, Polymarket /

$3 Million Reportedly Stolen in Polymarket Hack 2026-06-26 at 12:47 By Eduard Kovacs The decentralized prediction market said hackers targeted some of its users through a compromise of a third-party vendor. The post $3 Million Reportedly Stolen in Polymarket Hack appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

$3 Million Reportedly Stolen in Polymarket Hack Read More »

Mirage2FA phishing kit uses HTML smuggling to steal Microsoft 365 credentials

cybercrime, Fortra, MFA, Microsoft 365, News, phishing /

Mirage2FA phishing kit uses HTML smuggling to steal Microsoft 365 credentials 2026-06-26 at 12:26 By Sinisa Markovic Mirage2FA, a phishing kit that combines short-lived HTML smuggling with obfuscated JavaScript loaders to deliver fake Microsoft 365 login pages and steal credentials during MFA prompts, has been identified by researchers at Fortra. Fortra based its analysis on […]

Mirage2FA phishing kit uses HTML smuggling to steal Microsoft 365 credentials Read More »

Algerian national accused of running cybercrime marketplaces extradited to US

cybercrime, FBI, law enforcement, News, phishing, scams, US DoJ /

Algerian national accused of running cybercrime marketplaces extradited to US 2026-06-24 at 17:09 By Sinisa Markovic An Algerian national accused of running online marketplaces that sold phishing kits and fraud tools has been extradited from Spain to the United States to face bank fraud conspiracy charges. The post Algerian national accused of running cybercrime marketplaces […]

Algerian national accused of running cybercrime marketplaces extradited to US Read More »

Phishing attack on healthcare firm Xsolis impacts 1.4 million people

breach, cybercrime, data breach, healthcare, News, phishing /

Phishing attack on healthcare firm Xsolis impacts 1.4 million people 2026-06-24 at 15:00 By Sinisa Markovic Healthcare technology company Xsolis confirmed that a phishing attack resulted in unauthorized access to its network. The company develops AI-powered software for hospitals, health systems, and health plans and serves more than 600 hospitals and health insurers. “On January […]

Phishing attack on healthcare firm Xsolis impacts 1.4 million people Read More »

Phishing hides in routine Microsoft 365 workflows

cybercrime, Fortra, Microsoft 365, News, Outlook, phishing /

Phishing hides in routine Microsoft 365 workflows 2026-06-23 at 11:26 By Sinisa Markovic Attackers are abusing Outlook Groups and Microsoft 365 collaboration features to make phishing campaigns appear routine, according to Fortra. “The technique shifts malicious intent away from a single phishing email into a trusted productivity workflow. A user may see what looks like […]

Phishing hides in routine Microsoft 365 workflows Read More »

Operation FanTrap: Inside the FIFA 2026 Fraud Ecosystem

cyber news, cybersecurity, darkweb, OSINT, phishing /

Operation FanTrap: Inside the FIFA 2026 Fraud Ecosystem 2026-06-18 at 17:05 By Ashish Khaitan Executive Summary  The FIFA World Cup 2026 has become more than a global sporting event. It has evolved into a large-scale cybercrime opportunity exploited by threat actors through a coordinated ecosystem of fraudulent domains, social media channels, messaging platforms, pirated streaming […]

Operation FanTrap: Inside the FIFA 2026 Fraud Ecosystem Read More »

FBI, Google Dismantle ‘Outsider Enterprise’ Phishing Service

disrupted, FBI, Featured, Google, Outsider Enterprise, phishing /

FBI, Google Dismantle ‘Outsider Enterprise’ Phishing Service 2026-06-15 at 12:31 By Ionut Arghire The platform used more than 9,000 phishing sites, stealing nearly 4 million credit cards and causing roughly $1.9 billion in losses. The post FBI, Google Dismantle ‘Outsider Enterprise’ Phishing Service appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View […]

FBI, Google Dismantle ‘Outsider Enterprise’ Phishing Service Read More »

Scroll to Top